Your Magic Keyboard just got a rare update to fix a serious security flaw

Macworld

As we wait for the next round of software updates to hit our devices, Apple has released a rare update to one of its oldest accessories. The Magic Keyboard has been updated to Firmware Version 2.0.6, a security update that patches a Bluetooth vulnerability. The following models will get the update:

Magic Keyboard

Magic Keyboard (2021)

Magic Keyboard with Numeric Keypad

Magic Keyboard with Touch ID

Magic Keyboard with Touch ID and Numeric Keypad

If you have one of these models, you don’t have to do anything to install the firmware update. According to Apple, the installation will occur in the background when the keyboard is actively paired to a device running iOS, iPadOS, macOS, or tvOS.

According to Apple’s security notes, the update fixes a flaw that could let an attacker hijack your device’s Bluetooth connection:

Bluetooth

Impact: An attacker with physical access to the accessory may be able to extract its Bluetooth pairing key and monitor Bluetooth traffic

Description: A session management issue was addressed with improved checks.

CVE-2024-0230: Marc Newlin of SkySafe

To check the firmware version of your Magic Keyboard, make sure it is connected to your Mac, then go to System Settings > Bluetooth and in the My Devices section, look for your keyboard. Then click the Info (i) button to see information about the device.

Keyboards, Security Software and Services